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A SYSTEM AND METHOD FOR PERFORMING SECURE 
CREDIT CARD PURCHASES 

1 

2 BACKGROUND OF THE INVENTION 
3 

4 Field of the Invention 

5 This invention relates to a system and method of performing 

6 secure credit card purchases in connection with remote 

7 commercial transactions, wherein a credit card holder does not 

8 have to reveal their credit card number to a merchant or a 
^9 mechanism controlled by the merchant in order to accomplish a 
Bb purchase, and wherein the merchant is still assured of the 
tfl necessary credit verifications and approvals prior to 
4& authorizing and/or completing a credit card transaction, thereby 
-13 increasing overall security by minimizing any access to credit 
|3l4 card numbers without having to substantially modify or deviate 
j||5 from existing, accepted credit card transaction practices. 

;, f\ 

"■'hi 

17 Description of the Related Art 

18 The utilization of credit and debit cards to conduct 

19 transactions is ever increasing. This is especially the case 

20 with remote or "mail-order" transactions wherein merchants 

21 desire to be assured of a payment prior to shipping a product. 

22 For example, recent years have seen a substantial increase in 

23 the popularity of televised shopping networks to further 
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1 supplement the popularity of catalogue type sales. Moreover, 

2 the increasing use and popularity of distributed computer 

3 networks such as the internet has also contributed to the 

4 dramatic increase in the number of remote commercial 

5 transactions conducted every day. 

6 One primary reason associated with the rapid growth of 

7 remote commercial transactions is the ability of a merchant to 

8 reach an almost limitless number of potential customers at a 

9 substantially insignificant cost and with little or no operating 
ID overhead since an actual store is not required. Additionally, 
||l such sales techniques permit customers to view the products and 

'i ?v 

hk services in a greatly expanded marketplace, representing a great 

%B number of vendors, without extensive travel and without 

5|4 foregoing the privacy and convenience of their home or other 
predetermined computer site in some cases. Simply put, a 

Jl6 telephone or like communication avenue is all that is needed to 

'1^7 place the consumer in contact with the merchant and complete the 

T8 transaction. 

19 The vast increase in popularity of remote commercial 

2 0 transactions conducted over the telephone or internet is further 

21 facilitated by the relatively simple protocols and procedures 

22 necessary to conduct such transactions. In particular, in order 

23 to complete a valid transaction, a merchant need not physically 

24 see the customer or the credit card, but must merely accept and 

25 enter a customer's credit card account number and an expiration 
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1 date thereof to obtain authorization. This same convenience, 

2 however, is the primary disadvantage and/or problem associated 

3 with conducting commerce in the manners set forth above. 

4 Specifically, there is a great reluctance on the part of the 

5 customer to transmit the credit card account information, 

6 including the credit card number, because of the proliferation 

7 of fraud, and a well recognized lack of security directed to the 

8 protection of such account information. Indeed, it has been 

9 established that security and privacy concerns are realistic due 
: ip to the fact that credit card account data is easily readable or 
J{l interceptable by unauthorized parties, and can be readily used 
Jft for all types of remote transactions with minimal risk of being 
lh physically caught. In fact, unscrupulous individuals have many 
Bfe ways of gaining access to a consumer's legitimate remote 
jJS transactions and thereby obtaining the credit card information. 
B£ This information can be obtained from old credit card receipts 
J|7 or even from the unauthorized notation and use of the 
T8 information by merchants or their employees after a legitimate 
19 transaction is made. Naturally, the latter is the most 
2 0 difficult to prevent utilizing known methods and systems unless 

21 a consumer is willing to completely forego the use of a credit 

22 card for purchases. 

23 In the case of computerized remote transactions, as 

24 messages, including account data or other confidential 
2 5 information, move across the internet, they can easily pass 
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1 through numerous computers, any one of which can be utilized to 

2 copy such confidential information or data, thereby leading to 

3 a further risk of potential fraud when conducting such 

4 transactions. Presently, some companies currently seek to 

5 address such security and privacy concerns by the employment of 

6 encryption programs and techniques. To this end there is an 

7 extensive facility associated with both public and private 

8 encryption schemes being deployed in order to guard the private 

9 or secured information being transmitted across the internet or 
lp like world wide networks. Unfortunately, however, even with 
M such encryption techniques, the account information must usually 
fk still ultimately be transmitted to a third party who did not 
ife previously have access to that information previously. Even 
Sf9 some more sophisticated systems which seek to interpose a 
il|5 separate computer or encryption entity between the consumer and 
\k£ the merchant so as to obtain authorization and forward it to the 
lib merchant, that information must still be made available to 

18 and/or transmitted to that third party, thereby leaving open an 

19 avenue for fraud or theft. Further, such encryption techniques, 

20 even if minimally effective for computerized remote 

21 transactions, are not truly useable for other conventional types 

22 of remote transactions, or even normal in person transactions. 

23 Based on the above, there is an obvious need in the field 

24 of art associated with remote commercial transactions for a 

25 system and method of performing secure credit card purchases of 
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1 goods and services which truly reduces the risk of potential 

2 fraud and theft by eliminating outside access to a consumer's 

3 private credit card information without requiring complex 

4 encryption equipment or significantly altering the ease and 

5 convenience of current transaction techniques. Further, such a 

6 system and method should also be effective for use in 

7 conventional, "in person 11 transactions as well, thereby 

8 providing an added measure of security and minimizing the 

9 hazards associated with the passing on of account information by 
1.0 unscrupulous merchants. Also, such a system should provide 
1*1 limits to potential loss or liability in a manner which does not 
ttfe impede the transaction. 

1:3 

&™ 

lift Summary of the Invention 

gg The present invention is directed towards a system and 

E& method of performing secure credit card purchases, wherein 
payment for goods or services purchased is efficiently 

$8 accomplished while eliminating the necessity of disclosure or 

19 dissemination of a consumers specific credit card number or 

2 0 other account data which the customer or other individual may 

21 wish to maintain in confidence. The system and method of the 

22 present invention incorporates the advantage of consummating the 

23 purchase by the customer through the selection of any one of a 

24 plurality of predetermined payment categories. Collectively, 
2 5 the payment categories represent a variety of methods for 
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1 accomplishing payment for a fixed transaction, a multiple 

2 transaction and/or a repeating transaction. 

3 One embodiment of the system and method of the present 

4 invention comprises a customer receiving information, including 

5 specific data necessary for the purchase of any given product or 

6 service. This promotional information generated by the merchant 

7 can be received by any of a plurality of conventional means 

8 including advertisements, catalogues, computer network 

9 connections, direct person to person customer and merchant 
10 contact, telephone solicitation, mail orders, television sales, 
#1 etc. Once the customer has identified the product or services 
ijj2 which he/she wishes to purchase, the customer contacts and 
h M3 supplies a custodial authorizing entity with the requisite 
eJ|4 information concerning both the identification of a specific 
ft5 credit card or debit card account and a requested payment 
116 category. Additionally, security against unauthorized use of 
^7 confidential account data may also preferably include 
i; §8 information relating to the merchant's identification and/or 

19 location. 

20 The custodial authorizing entity is preferably defined as 

21 the entity which has or has been assigned the custodial 

22 responsibility for the financial account data of a customer's 

23 credit card account, including a previous knowledge of the 

24 credit card number and other information such as credit limits, 

25 payment history, available credit amounts and other information 
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1 which will determine the status of a given credit card account 

2 in terms of authorizing a requested payment for a current 

3 purchase. 

4 As part of the security system for accomplishing a 

5 commercial transaction utilizing credit card or debit card 

6 payment, the custodial authorizing entity includes sufficient 

7 facilities, preferably including a processing computer or like 

8 applicable hardware for the generation of an exclusive 

9 transaction code. The transaction code is to be used in 
1,0 substitution for the credit card number and when utilized as 
4k authorized, will issue the merchant a credit approval, and will 
kh accomplish payment for the goods or services desired in the 
'IB normal fashion normally associated with a credit or debit card 

if" 

!|S4 transaction, without the publication or dissemination of an 

ffiS identifying credit card number for a specific customer's account 

QS to any entity that is not already aware of that information, 

^ijv Further, a feature of the transaction code is its ability 

¥8 to indicate any one of preferably a plurality of predetermined 

19 payment categories which may be either requested by the customer 

20 or automatically chosen by the custodial authorizing entity 

21 based on the type of account or the type of purchase or other 

22 commercial transaction involved. Each of the payment categories 

23 are reflective of a different type of payment desired or 

24 required to consummate the intended purchase. More 

25 specifically, the plurality of payment categories may include a 
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1 single transaction involving a specific dollar amount for a 

2 purchase within a specific time period, such as twenty four 

3 hours, during which authorization of the purchase remains valid. 

4 Alternately, a single transaction may be involved wherein a 

5 maximum limit or a dollar amount is determined above which the 

6 purchase will become invalidated and further wherein a fixed 

7 period of time is preferably established for maintaining 

8 authorization of such purchase. Other alternatives would 

9 involve one or more of the categories coded to define multiple 
IP transactions involving a maximum dollar amount for purchases, as 
|l well as a fixed period of time for authorization of such 
te purchases, and/or a repeating transaction wherein payments may 
ll3 be automatically accessed by a merchant over a predetermined or 
lM unspecified time interval (such as every thirty days) for a 
I355 specific dollar amount or a maximum dollar amount limit. Also, 
li,6 limits solely as to a specific merchant or a given time period 
;||7 can be effectively established for which the transaction code is 
T8 valid. 

19 A further feature of the present invention to be described 

2 0 in greater details hereinafter, is the requirement that the 

21 transaction code, once received by the customer is transmitted 

22 to the merchant by the customer or a person specifically 
2 3 authorized by the customer. Only minimal contact by the 

24 merchant and the custodial authorizing entity is provided for 

25 purposes of the merchant verifying the validity of the 
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1 transaction code utilizing a conventional process electronically 

2 or otherwise similar to the verification of a credit card number 

3 normally offered to a merchant for the purchase of goods or 

4 services. There is, therefore, no disclosure, publication or 

5 other dissemination of the specific credit card number of a 

6 given customer account beyond those entities who already know 

7 the information, and the transaction code is transmitted 

8 exclusively to the customer by the custodial authorizing entity 

9 who has the ability to better identify whether the customer is 
lp properly authorized to use the account. Moreover, the 
ft transaction code, once given out by the customer, only has a 
kk limited usefulness, thereby limiting the risk of misuse and 
IB minimizing the potential losses to be experienced by the credit 
flM card company and/or the account holder. 

gj5 Accordingly, it is an object of the present invention to 

Ilfe6 provide a system and attendant method for performing remote 

^7 commercial transactions utilizing credit cards, which maximizes 

T8 the security of the transaction and limits the potential 

19 liability to be experienced from a fraudulent transaction. 

2 0 Yet another object of the present invention is to provide 

21 a secure system and method for establishing credit card 

22 purchases which eliminate the disclosure or dissemination of the 

23 actual credit card number to anyone other than a custodial 

24 authorizing entity which normally has custodial responsibilities 

25 for account information including the previously established 
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1 credit card number. 

2 It is another object of the present invention to provide a 

3 system and method of establishing secure credit card purchases 

4 through the generation of a transaction code which renders it 

5 extremely difficult or impossible to access or infiltrate a 

6 customer's credit card account by unauthorized means. 

7 It is yet another object of the present invention to 

8 provide a secure method of completing a remote commercial 

9 transaction which eliminates the need to convey actual account 
IP information to a merchant, but which allows the merchant to 
ft conduct a normal verification of information needed to 
tafe consummate a given purchase . 

It is also an object of the present invention to provide a 

lm system and attendant method of accomplishing secure credit card 

i|5 purchases which eliminates the need to disclose or disseminate 

Kk6 a given credit card number while providing the customer with the 

;|j7 versatility of choosing any one of a plurality of predetermined 

T8 payment categories. 

19 It is yet another feature of the present invention to 

2 0 provide a system and method of accomplishing secure credit card 

21 payments having the versatility of allowing the customer to 

22 select any one of a plurality of payment categories which are 

23 indicative of a variance in the amount of a purchase as well as 

24 the time in which authorization for such payment is valid. 

25 These and other objects, features and advantages of the 

10 



rG/1-706-98 



1 present invention will become more clear when the drawings as 

2 well as the detailed description are taken into consideration. 

3 

4 Brief Description of the Drawings 

5 For a fuller understanding of the nature of the present 

6 invention, reference should be had to the following detailed 

7 description taken in connection with the accompanying drawings 

8 in which: 

9 Figure 1 is a schematic representation of a flow chart 
10 showing various steps involved in the performance of the system 
ft and method of the present invention for the secure credit card 
\M2 purchasing; 

'l|3 Figure 2 is a schematic representation similar to that of 

grg Figure 1 wherein customer to merchant contact is accomplished by 

2|5 conventional facilities such as television; and 

Q^s Figure 3 is a schematic representation similar that of 

Hb Figure 2 wherein customer to merchant contact is established 

'tf8 either by phone or in person. 

19 Like reference numerals refer to like parts throughout the 

2 0 several views of the drawings. 

21 

22 Detailed Description of the Preferred Embodiment 

23 As shown in the accompanying Figures, the present invention 

24 is directed towards a system and method for accomplishing secure 
2 5 credit card purchases. Moreover, these purchases can be "in 

11 
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1 person", but preferably include remote commercial transactions 

2 such as mail order, purchases over the internet, television 

3 solicitations, telephone solicitations, etc. Security is 

4 establish by virtue of the elimination of the need to disclose 

5 an active credit card number and expiration date to the merchant 

6 or any other party other than the original credit card company, 

7 issuing bank or like financial institution which already has 

8 custodial responsibilities for the financial or account data 

9 associated with a given customer's credit card account. 

10 More specifically and with reference to Figure 1 the system 

||_ as well as an attendant method is preferably instigated by the 

life customer viewing a product, identifying a desired amount for a 

%B transaction and/or receiving promotional information as at 10, 

fp either in person or by any of the electronic or more 

Q|5 conventional techniques which will be described in greater 

OS detail with reference to Figures 2 through 3 . Once the customer 

? 5i7 reviews the product or promotional information and has 

*£*8 sufficient information, such as including price, product or 

19 service identification, payment requirement, etc., regarding the 

20 remote commercial transaction to be conducted, the customer 

21 contacts, either by computer, telephone or in person, a 

22 custodial authorizing entity as at 12. The custodial 

23 authorizing entity may herein be defined as comprising that 

24 entity or institution which has or has been designated by the 

25 entity which has custodial responsibility for the financial data 

12 
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and security of a given credit card account of a customer. As 
set forth above such custodial authorizing entity can be 
represented by the credit card company issuing a credit card to 
a given customer or alternately can be represented by a bank or 
other financial institution serving to sponsor a credit card or 
debit card to the extent of processing the debits and credit 
associated therewith. The authorizing entity 1 s custodial 
responsibilities of course includes the previous knowledge 
and/or storage of the credit card number serving to identify a 
specific customer's credit card account. Once contacted, the 
customer then supplies appropriate identification data to inform 
the custodial authorizing entity of a specific customer's credit 
card account as at 14. In addition, the customer will supply 
the custodial authorizing entity with additional required 
information needed to consummate the purchase as well as ensure 
the security of the account in order to prevent its unauthorized 
use. Such additional information may preferably include the 
identification of the merchant or merchants involved, when such 
information is deemed necessary, and a requested one of a 
plurality of predetermined payment categories to facilitate 
consummation of the purchase of the products or services 
desired. Such predetermined plurality of payment categories 
will be discussed in greater detail hereinafter. 

Once the appropriate information has been received from the 
customer as indicated at 16, the custodial authorizing entity 

13 
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1 verifies the credit card status and account identification of 

2 the customer to determine the viability of the account in terms 

3 of dollar amount limits, payment history, available credit 

4 balance, etc. If the accessed credit card account is not in 

5 good standing, the custodial authorizing entity will permanently 

6 or temporarily terminate the transaction as at 18 and/or 

7 communicate to the customer directly as at 18' by any applicable 

8 means for purposes of informing the customer of the unacceptable 

9 status of the accessed credit card account. If the credit card 
10 account is in good standing, based at least in part on the 
Jjl requested payment category, (amount of payment) , the custodial 
|3|2 authorizing entity generates a transaction code as at 20. The 
4|3 transaction code is used in substitution for the specific credit 
J|j4 card number which would normally identify a customer's credit 
Ji,5 card account and would allow access thereto by any entity having 
:T'6 possession of the credit card number whether or not such 
4p possession was authorized or unauthorized. More specifically, 
#8 the transaction code is pre-coded to be indicative of a specific 
19 credit card account, preferably a merchant or merchants 
2 0 identification and a designated payment category, selected from 

21 the plurality of predetermined payment categories as set forth 

22 above. Once generated, the transaction code is communicated 

23 exclusively to the authorized and verified customer by the 

24 custodial authorizing entity as at 22, wherein the system and 

25 method of the present invention preferably restricts 

14 
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1 communication between the custodial authorizing entity and the 

2 merchant except to conduct a normal verification as will be 

3 explained. 

4 The verified customer thereafter and preferably within a 

5 time limit to be determined by the customer and pre-coded in 

6 association with the transaction code, will directly or through 

7 an authorized representative communicate the transaction code to 

8 the merchant as at 24 . The system and method of the preferred 

9 embodiment of the present invention contemplates that only the 
10 verified customer will transmit the generated transaction code 
#L to the merchant in the case of a remote commercial transaction, 
f|j2 thereby limiting knowledge of the transaction code to those 
:: €J3 parties having a need to know. Of course, however, as the 
[M4 transaction code will generally have a limited value as defied 
ft 5 by the verified customer when obtained, the verified customer 
=16 may designate an agent or other entity to act as the customer on 
]%7 his/her behalf, with the amount of potential liability to be 
' ; i?8 experienced by such a transaction to be limited to the amount 

19 defined by the verified customer when obtaining the transaction 

20 code. 

21 At this point the purchase is consummated at least from the 

22 customer standpoint in that the customer has previously 

23 established the acceptable status of the account. Therefore the 

24 customer feels free to disclose the transaction code to the 
2 5 merchant or merchants instead of the actual credit card number 
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1 as at 22, 24 and is relatively unconcerned if the transaction 

2 code is published or otherwise disseminated to unauthorized 

3 entities. In a preferred embodiment wherein a merchant 

4 identifier is pre-coded in association with the transaction 

5 code, the pre-coding of the transaction code will prohibit an 

6 unauthorized use due at least in part to the fact that the 

7 merchant is specifically identified and any attempt to use the 

8 transaction code other than by the identified merchant will be 

9 prohibited. In addition, the merchant is prevented from 
10 "overcharging" or "extending" the purchase by fixing the dollar 
€b_ amount to satisfy the specific cost or limit of the purchase as 
kh well as a specific time limit or time parameters in which the 
1|3 authorization for payment is valid. Such information, as set 
B|4 forth above, is communicated by the requested and subsequently 
ft5 designated payment category as set forth above. Restricted 
|l6 communication between the merchant and the custodial authorizing 
^7 entity as at 26 is permitted exclusively for purposes of 
i; ¥8 verification of the transaction code in a manner, which may 
19 utilize, at least to some extent, conventional facilities for 
2 0 the verification of a credit card number by most merchants or 

21 like commercial establishments. As a result, the merchant also 

22 has a desired verification as to the validity of a transaction 

23 and can effectively make arrangements to be paid by the credit 

24 card company. 

25 If for some reason the transaction code is refused 
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1 verification, the customer may be informed directly by the 

2 merchant as at 28 and or the transaction may be terminated as at 

3 30. Assuming verification of the transaction code by the 

4 custodial authorizing entity, the merchant proceeds to 

5 consummate the purchase and send the order, as at 32, in the 

6 case of a remote commercial transaction. 

7 Figures 3 and 4 are representative of the versatility of 

8 the system and method of the present invention wherein the 

9 customer 54 may receive the aforementioned promotional 
1.0 information from the merchant 56 by any appropriate means such 
pL as television solicitation as at 58, phone solicitation as at 60 
hp. and/or personal solicitation as at 62. Once the customer 
:; ij3 receives the promotional information, which may include the 
fit4 viewing of the product itself, or in advance if a general 

estimate as to the ultimate cost of an anticipate purchase (s) 

=16 can be made prior to viewing promotional information, the 

'jj7 customer contacts the custodial authorizing entity 64 by any 

¥8 appropriate electronic or conventional facilities such as direct 

19 phone to phone contact as at 66 and 66' or direct computer 

20 contact as at 42', 45 1 . Once the customer's authorization is 

21 confirmed, details of the anticipated transaction are 

22 established so as to determine a payment category, and the a 

23 transaction code is issued to the customer. The customer, 

24 either directly or through a representative, can then utilize 

25 the transaction code to consummate a transaction within the 
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1 defined parameters of the payment category. Moreover, the 

2 merchant 56, through a conventional, yet restricted 

3 communication with the custodial authorizing entity 64 by any of 

4 a plurality of conventional or electronic methods using computer 

5 to computer linking as at 44 1 , 45* or by telephone transmission 

6 as at 56 ! , 66' , can obtain a verification and subsequent payment 

7 utilizing the transaction code only. 

8 As emphasized above, an important feature of the present 

9 invention is the ability of the customer to request a desired or 
: L0 a required payment category and the ability of the custodial 

authorizing entity 64 and/or a processing computer 45 of the 

life custodial authorizing entity to issue a transaction code in 

'113 accordance with the payment category. The payment categories, 

i]4 may be collectively defined as a variety of different types of 

3|5 transactions. Such transactions may include a single 

0=6 transaction for a specific amount of a purchase to be 

;||7 consummated. Alternatively, the payment category may include a 

5 ¥8 single transaction defined by a single purchase having a maximum 

19 limit amount, wherein the specific or precise cost of the 

2 0 purchase has not been determined for a variety of reasons, and 

21 as such, the customer desires to set a maximum amount for which 

22 the single transaction may be made. Accordingly, with such a 

23 payment category, the exact amount may not be known in advance, 

24 but the customer is assured of not paying over the specifically 

25 designated maximum limit. In addition, the transactions are 
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1 preferably, but not necessarily, authorized to be conducted only 

2 over a fixed life period of time, such as within twenty four 

3 hours, thereby ensuring that an outstanding transaction code 

4 does not remain valid if not used as generally intended. This 

5 limited time period can, of course be varied or omitted 

6 depending upon the wishes of the customer and/or the policies of 

7 the custodial authorizing entity. Also, these or any other 

8 payment category transactions may include a specific merchant 

9 identification to further restrict use of the transaction code. 
10 The payment category may also include a mult i -transaction 
Cl authorization wherein more than one purchase may be made from 
ttl2 one or a plurality of different merchants, each of which may or 
,: lp may not be identified by the customer and pre-coded in 
[||4 association with the transaction code, and wherein a total cost 
ffii5 of the plurality of purchases may not exceed a maximum limit 
Qj5 amount. This transaction can also be limited to having to take 
h fy place within a predetermined, designated fixed life span, such 
% as but not limited to twenty four hours. Accordingly, in some 

19 instances wherein a customer, or an agent of the customer, such 

20 as a child, guardian, or care giver, must make a number of 

21 transactions or purchases which are authorized by the customer, 

22 the customer may designate a maximum amount which can be spent 

23 utilizing a particular transaction code within a predetermined 

24 period of time, and/or can designate that only one merchant, 

25 whether designated or not, can use the transaction code. 
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1 As yet another alternative, the payment category may 

2 include a repeating transaction for a specific amount to be paid 

3 in each of a fixed number of intervals. For example, the 

4 customer may which to join a gym or receive services or products 

5 over a fixed number of payment intervals, such as every thirty 

6 days. Accordingly, the merchant will be authorized to charge 

7 the credit card account designated by the corresponding 

8 transaction code a fixed monthly payment. Similarly, a 

9 repeating transaction for a stated minimum interval such as 
10 every thirty days may be authorized for a specific amount for an 
Jill unspecified number of intervals wherein the merchant will be 
W2 authorized to continuously obtain payment on a "monthly" basis 
v l|3 until the customer decides to cancel such authorization . Also, 
fj|4 a more open ended transaction wherein charges may be performed 
g5 until cancelled and with or without other limiting criteria may 
hfi also be provided. 

'"1:7 Since many modifications, variations and changes in detail 

'¥8 can be made to the described preferred embodiment of the 

19 invention, it is intended that all matters in the foregoing 

2 0 description and shown in the accompanying drawings be 

21 interpreted as illustrative and not in a limiting sense. Thus, 

22 the scope of the invention should be determined by the appended 

23 claims and their legal equivalents . 

24 Now that the invention has been described, 
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1 What is claimed is : 

2 1. A method of performing secure credit card purchases, 

3 said method comprising the steps of: 

4 a) contacting a custodial authorizing entity having 

5 custodial responsibility of account parameters of a customer's 

6 credit card account ; 

7 b) supplying the custodial authorizing entity with 

8 at least account identification data; 

9 c) designating a payment category; 

10 d) generating a transaction code reflecting at least 

: ;Pl said designated payment category and a purchase authorization 

I4I2 within said designated payment category; 

:; ||3 e) communicating the transaction code to a merchant 

lS|4 to consummate a purchase within defined purchase parameters; 

i||5 f) verifying that said defined purchase parameters 

|16 are within said designated payment category; and 

]%7 g) obtaining said purchase authorization so as to 

% confirm that said defined purchase parameters are within said 

19 designated payment category and complete the purchase. 

20 2. A method as recited in claim 1 further comprising the 

21 step of obtaining said purchase authorization from the custodial 

22 authorizing entity. 

23 3. A method as recited in claim 1 further comprising a 

24 step of communicating promotional information of offered subject 

25 matter to the customer by the merchant, pre-determining the 
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1 purchase parameters of the purchase, and corresponding said 

2 designated payment category to said purchase parameters. 

3 4 . A method as recited in claim 1 further comprising the 

4 merchant communicating the transaction code to the custodial 

5 authorizing entity for verification. 

6 5. A method as recited in claim 1 further comprising the 

7 custodial authorizing entity generating a transaction code which 

8 reflects at least said designated one of a plurality of said 

9 payment categories. 

10 6. A method as recited in claim 5 further comprising 
defining said plurality of payment categories to include amount 

11112 parameters for a cost of purchase. 

?13 7. A method as recited in claim 5 further comprising 

eM defining said plurality of payment categories to include time 

is parameters during which the purchase can be completed, 

|16 8. A method as recited in claim 5 further comprising 

%7 defining the plurality of payment categories to include 

#8 authorization for a single transaction at a fixed amount for 

19 purchase within a predetermined period of time. 

20 9. A method as recited in claim 5 further comprising 

21 defining the plurality of payment categories to include 

22 authorization for a single transaction at a maximum amount for 

23 purchase within a predetermined period of time. 

24 10. A method as recited in claim 5 further comprising 

25 defining the plurality of payment categories to include at least 
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1 two of the purchase authorizations for multiple transactions at 

2 a maximum total amount for items purchased within a 

3 predetermined time period. 

4 11. A method as recited in claim 5 further comprising the 

5 plurality of payment categories to include at least two of said 

6 purchase authorizations for a repeating transaction at a fixed 

7 amount payable at each of a fixed number of time intervals . 

8 12 . A method as recited in claim 5 further comprising 

9 defining the plurality of payment categories to include 
10 authorization for a repeating transaction at a fixed amount 
^f|l payable at each of an unspecified number of time intervals. 

IIP 13 . A method as recited in claim 5 further comprising 

h 3B defining the plurality of payment categories to include: 

Sfi a) authorization for a single transaction at a fixed 

!s*5 amount for a purchase within a predetermined period of time, 

|16 b) authorization for a single transaction at a 

;; i;7 maximum amount for a purchase within a predetermined period of 

lf8 time, 

19 c) authorization for multiple transactions at a 

2 0 maximum total amount for purchases within a predetermined time 

21 period, 

22 d) authorization for a repeating transaction at a 

23 fixed amount for purchases payable at each of a fixed number of 

24 time intervals, and 

25 e) authorization for a repeating transaction at a 

23 
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1 fixed amounts for purchases payable at each of an unspecified 

2 number of time intervals. 

3 14 . A method as recited in claim 5 further comprising 

4 defining the plurality of categories to include: 

5 a) authorization for a single transaction at a fixed 

6 amount for a purchase, 

7 b) authorization for a single transaction at a 

8 maximum amount for a purchase, 

9 c) authorization for multiple transactions at a 
10 maximum total amount for purchases, 

ill d) authorization for a repeating transaction at a 

0j2 fixed amount for purchases payable at each of a fixed number of 

time intervals, and 

iJ|4 e) authorization for a repeating transaction at a 

|§5 fixed amounts for purchases payable at each of an unspecified 

|16 number of time intervals. 

'1;7 15. A method as recited in claim 1 further comprising 

; i?8 generating a transaction code which further reflects an 

19 identification of the merchant. 

20 16. A method as recited in claim 5 further comprising 

21 defining the plurality of categories to include: 

22 a) authorization for a single transaction at a fixed 

23 amount for a purchase, 

24 b) authorization for a single transaction at a 
2 5 maximum amount for a purchase, and 
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1 c) authorization for multiple transactions at a 

2 maximum total amount for purchases . 

3 17. A method as recited in claim 16 further comprising the 

4 step of defining the plurality of categories to include a 

5 limited time interval during which said purchase authorization 

6 is valid. 
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1 ABSTRACT OF THE INVENTION 

2 A method and system of performing secure credit card 

3 purchases in the context of a remote commercial transaction, 

4 such as over the telephone, wherein only the customer, once 

5 generally deciding upon a product or service to be purchased, 

6 communicates with a custodial authorizing entity, such as a 

7 credit card company or issuing bank wherein such entity has 

8 previous knowledge of the credit card number as well as 

9 custodial control of other account parameters such as interest 
10 rate, payment history, available credit limit etc. The customer 
ypl supplies the custodial authorizing entity with the account 
Il|2 identification data such as the credit card number and a 
^lp requested one of a possible plurality of predetermined payment 
l|§4 categories which define the dollar amount for the purchase and 
A5 specific, predetermined time parameters within which 
jl"6 authorization by the custodial authorizing entity will remain in 
#7 effect. The custodial authorizing entity then generates a 
#8 transaction code which is communicated exclusively to the 
19 customer wherein the customer in turn communicates only the 
2 0 transaction code to the merchant instead of a credit card 

21 number. The transaction code is indicative of merchant 

22 identification, credit card account identification and a 

23 designated one of the plurality of predetermined payment 

24 categories. 
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